SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 39da9c2402f9da3f5c44616e3cea439cf185ff71.
Database Entry
| SHA1 Fingerprint: | 39da9c2402f9da3f5c44616e3cea439cf185ff71 |
|---|---|
| Certificate Common Name (CN): | llftscthesen.ca |
| Issuer Distinguished Name (DN): | llftscthesen.ca |
| TLS Version: | TLSv1 |
| First seen: | 2015-11-06 16:06:14 UTC |
| Last seen: | 2015-11-14 16:17:16 UTC |
| Status: | Blacklisted |
| Listing reason: | Dridex C&C |
| Listing date: | 2015-11-14 10:07:04 |
| Malware samples: | 4 |
| Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2015-11-14 16:17:16 | 0fd7845678240ad3a32ca30cc81ed62c |  18/55 (32.73%)
| Dridex | 128.199.239.142:8843 |
| 2015-11-14 16:17:16 | 0fd7845678240ad3a32ca30cc81ed62c | 18/55 (32.73%)
| Dridex | 128.199.239.142:8843 |
| 2015-11-14 05:47:52 | 0e2be5a832e0e75233dc1b595a1695a6 | 21/55 (38.18%)
| Dridex | 128.199.239.142:8843 |
| 2015-11-14 05:47:52 | 0e2be5a832e0e75233dc1b595a1695a6 | 21/55 (38.18%)
| Dridex | 128.199.239.142:8843 |
| 2015-11-14 02:56:56 | f0e4db415f7949ef7f5b2ecf35c581dd | 24/56 (42.86%)
| Dridex | 128.199.239.142:8843 |
| 2015-11-14 02:56:56 | f0e4db415f7949ef7f5b2ecf35c581dd | 24/56 (42.86%)
| Dridex | 128.199.239.142:8843 |
| 2015-11-06 16:06:14 | 78915223a76ac6ff8c63495465942987 | 0/55 (0.00%)
| 128.199.239.142:8843 | |
| 2015-11-06 16:06:14 | 78915223a76ac6ff8c63495465942987 | 0/55 (0.00%)
| 128.199.239.142:8843 |
# of entries: 8 (max: 100)